Considerations for configuring SafetyNet attestation - App versions

Before you enable 

SafetyNet

 attestation for your organization's 

Android

 devices, ensure that the device users have upgraded the 

UEM Client

 on their devices to version 12.9 MR1 or later or the grace period compliance action will be enforced on the device.

If you enable attestation for your organization’s 

BlackBerry UEM

 instance, and you have 

BlackBerry UEM Client

 version 12.10 installed, during 

Android

 device activation, the authenticity and integrity of the device is checked. If you have 

BlackBerry UEM Client

 version 12.9 MR1 installed, device level 

SafetyNet

 attestation is performed after activation. Ensure that you have 

BlackBerry UEM Client

 for 

Android

 version 12.9 MR1 or later installed on your organization’s  

Android

 devices before you enable this feature.

Version of   BlackBerry UEM	When   SafetyNet   Attestation is performed
12.9 MR1	Post device activation
12.10	After device activation when the  BlackBerry UEM Client  is installed During device activation when the  BlackBerry UEM Client  is installed During  BlackBerry Dynamics  apps activation After app activation for  BlackBerry Dynamics   apps On demand using REST APIs At device restart if the  BlackBerry UEM Client  is activated

 

 If you installed 

BlackBerry UEM

 12.9 MR1 in your organization’s environment, and you enabled 

SafetyNet

 attestation, if you upgrade to 

BlackBerry UEM

 12.10, you must select the “Google SafetyNet Attestation failure” option in your organization’s compliance profile so that your organization’s  

Android

 devices are not subject to 

SafetyNet

 attestation enforcement actions.